On February 14, 2024, the Vermont Office of the Attorney General reported a data breach at Lexington Medical Center that occurred on October 4, 2023. The breach involved unauthorized access to one employee email account, potentially affecting sensitive billing-related documents of individuals; however, the exact number of impacted individuals is unknown.
Source: https://ago.vermont.gov/document/2024-02-14-lexington-health-data-breach-notice-consumers
TPRM report: https://www.rankiteo.com/company/lexingtonmedical
"id": "lex941072725",
"linkid": "lexingtonmedical",
"type": "Breach",
"date": "10/2023",
"severity": "25",
"impact": "1",
"explanation": "Attack without any consequences"
{'affected_entities': [{'industry': 'Healthcare',
'name': 'Lexington Medical Center',
'type': 'Healthcare'}],
'attack_vector': 'Email Account Compromise',
'data_breach': {'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Sensitive billing-related '
'documents']},
'date_detected': '2023-10-04',
'date_publicly_disclosed': '2024-02-14',
'description': 'Unauthorized access to one employee email account, '
'potentially affecting sensitive billing-related documents of '
'individuals.',
'impact': {'data_compromised': ['Sensitive billing-related documents'],
'systems_affected': ['Employee email account']},
'references': [{'date_accessed': '2024-02-14',
'source': 'Vermont Office of the Attorney General'}],
'title': 'Data Breach at Lexington Medical Center',
'type': 'Data Breach'}